Merge branch 'main' into dev-0.9.x

Resolve conflict in .forgejo/workflows/docker-publish-semantic.yml:
both sides removed the cache-from/cache-to lines; keep this branch's
unique-per-run platform tag from ea8cda7 (related to issue #84).

Picks up dependency bumps from main (click 8.3.3->8.4.0,
idna 3.14->3.15, openai 1.109.1->2.37.0).

requirements.txt

@@ -6,7 +6,7 @@ anyio==4.13.0
 async-timeout==5.0.1
 attrs==26.1.0
 certifi==2026.4.22
-click==8.3.3
+click==8.4.0
 distro==1.9.0
 exceptiongroup==1.3.1
 fastapi==0.136.1
@@ -15,11 +15,11 @@ frozenlist==1.8.0
 h11==0.16.0
 httpcore==1.0.9
 httpx==0.28.1
-idna==3.14
+idna==3.15
 jiter==0.14.0
 multidict==6.7.1
 ollama==0.6.2
-openai==1.109.1
+openai==2.37.0
 orjson>=3.11.5
 numpy>=1.26
 pillow==12.2.0
@@ -32,11 +32,11 @@ PyYAML==6.0.3
 sniffio==1.3.1
 starlette==0.52.1
 truststore==0.10.4
-tiktoken==0.12.0
+tiktoken==0.13.0
 tqdm==4.67.3
 typing-inspection==0.4.2
 typing_extensions==4.15.0
-uvicorn==0.46.0
+uvicorn==0.47.0
 uvloop
 yarl==1.23.0
 aiosqlite